Static task
static1
Behavioral task
behavioral1
Sample
0458019e54799d0a33de15a98a0d1408b0a034751f7828ce49f318ad53e35fb0.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0458019e54799d0a33de15a98a0d1408b0a034751f7828ce49f318ad53e35fb0.exe
Resource
win10v2004-20240226-en
General
-
Target
0458019e54799d0a33de15a98a0d1408b0a034751f7828ce49f318ad53e35fb0
-
Size
124KB
-
MD5
5aaa37c7978d288ecbc92bb17aae8bc6
-
SHA1
f25bf2335b519877699522dd7acc10b1cfb516f2
-
SHA256
0458019e54799d0a33de15a98a0d1408b0a034751f7828ce49f318ad53e35fb0
-
SHA512
a5e8214e8336edf726b46ed6f4b906d208a5b7899466255b08484af2709d60969e6636d38a83230eb6570d9ea3fb51cb89856a4b86af6bd3cdc1979a18504788
-
SSDEEP
3072:snLXKRWSW3Tdv8xfaXOGd3XLsykuvut/34a8:sOc9hv+CXtrsykuW3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0458019e54799d0a33de15a98a0d1408b0a034751f7828ce49f318ad53e35fb0
Files
-
0458019e54799d0a33de15a98a0d1408b0a034751f7828ce49f318ad53e35fb0.exe windows:4 windows x86 arch:x86
cf3c39d32d1d5b093410134aed09d04e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
GetComputerNameA
lstrcmpiW
GetModuleHandleA
FindAtomW
LocalFree
ReleaseMutex
LoadLibraryW
ResetEvent
ResumeThread
GetCommandLineW
CreateThread
GetSystemTime
GetTickCount
SetEvent
GetDiskFreeSpaceW
GetFileAttributesW
CreateFileA
HeapCreate
SetLastError
user32
FillRect
CloseWindow
GetClipCursor
DispatchMessageA
GetComboBoxInfo
CallWindowProcA
DrawStateA
GetClassInfoA
GetKeyState
SetFocus
GetDlgItem
DestroyCaret
CreateWindowExA
MessageBoxA
cryptdlg
DecodeRecipientID
CertTrustInit
CertConfigureTrustA
CertTrustCertPolicy
CertTrustFinalPolicy
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 111KB - Virtual size: 139KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gbkmrlk Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE